1. logstash pipleline

input, filter, output

2. plugin

2.1 code plugin

A codec plugin changes the data representation of an event. Codecs are essentially stream filters that can operate as part of an input or output.

[code plugin] (https://www.elastic.co/guide/en/logstash/6.0/codec-plugins.html)

2.2 filter plugin

A filter plugin performs intermediary processing on an event. Filters are often applied conditionally depending on the characteristics of the event.

[filter plugin] (https://www.elastic.co/guide/en/logstash/6.0/filter-plugins.html)

3. logstash pattern

[logstash pattern] (https://github.com/logstash-plugins/logstash-patterns-core/blob/master/patterns)

4. Filebeat Multiple Line

https://www.elastic.co/guide/en/beats/filebeat/master/multiline-examples.html